For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Dec 25, 2014

Would the following do it?

 

Add a virtual server with a spare IP address and wildcard port. Add host entries on the F5 with the update server's names pointing to the spare address, this will override DNS and send the traffic to your virtual server. Set your pool members on the new virtual server as the proxy addresses.

 

This should send the update traffic to the virtual server which will in turn throw this at the proxy. Thereafter its up to the proxy to resolve the requested website name using normal DNS.

 

Just an idea.

 

Merry Xmas!

 

Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Dec 25, 2014
The only change you would need to make to each HTTP request is to proxify it... when HTTP_REQUEST { HTTP::uri "http://[HTTP::host][HTTP::uri]" }